SOLVED: repository GPG errors

deb http://debian.linuxmint.com

SOLVED: repository GPG errors

Postby TomRoche on Sat Sep 15, 2012 2:57 pm

I'm currently on UP4. Having recently noted many fewer updates, and then today having gotten/installed `mint-debian-mirrors` (which installed without problems--all my path delimiters are there :-) and `mintupdate-debian`, I suspected another update pack was in the pipeline. Before that comes out, I'd like to fix a problem I've been having for awhile (few months?), both in `aptitude` (which I use a lot) and `Update Manager` (which I use rarely):

Code: Select all
W: GPG error: http://debian.linuxmint.com testing Release: The following signatures were invalid: BADSIG 07DC563D1F41B907 Christian Marillat <marillat@debian.org>
W: GPG error: http://mozilla.debian.net squeeze-backports Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 85A3D26506C4AE2A
W: GPG error: http://mirrors.ibiblio.org squeeze-cran/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 06F90DE5381BA480


How to fix? Feel free to pass pointers to links to RTFM. Note that I already have a buncha keyrings:

Code: Select all
$ aptitude search "keyring" | grep -e '^i'
i   debian-archive-keyring     - GnuPG archive keys of the Debian archive
i A debian-keyring             - GnuPG keys of Debian Developers
i   debian-multimedia-keyring  - GnuPG archive key of the debian-multimedia
i   gnome-keyring              - GNOME keyring services (daemon and tools
i A libgnome-keyring-common    - GNOME keyring services library - data file
i   libgnome-keyring0          - GNOME keyring services library
i   libgnome-keyring1.0-cil    - CLI library to access the GNOME Keyring da
i A libmatekeyring             - MATE keyring services library
i   libpam-gnome-keyring       - PAM module to unlock the GNOME keyring upo
i   linuxmint-keyring          - GnuPG key of the Linux Mint repository
i A mate-keyring               - MATE keyring services
i   python-gnomekeyring        - Python bindings for the GNOME keyring libr
i   python-keyring             - store and access your passwords safely
Last edited by TomRoche on Fri Jan 11, 2013 8:41 pm, edited 2 times in total.
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

Linux Mint is funded by ads and donations.
 

Re: repository GPG errors

Postby zerozero on Sat Sep 15, 2012 6:29 pm

debian-multimedia is now deb-multimedia http://deb-multimedia.org/ the change is not important if you are in the UP flow but the keyring changed;

http://mozilla.debian.net/ is signed
2 out of 3 ain't bad :P
Image

[ bliss of ignorance ]
zerozero
Level 16
Level 16
 
Posts: 6480
Joined: Tue Jul 07, 2009 2:29 pm

Re: repository GPG errors

Postby TomRoche on Sat Sep 15, 2012 7:20 pm

TomRoche wrote:a problem I've been having for awhile (few months?), both in `aptitude` (which I use a lot) and `Update Manager` (which I use rarely):

Code: Select all
W: GPG error: http://debian.linuxmint.com testing Release: The following signatures were invalid: BADSIG 07DC563D1F41B907 Christian Marillat <marillat@debian.org>
W: GPG error: http://mozilla.debian.net squeeze-backports Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 85A3D26506C4AE2A
W: GPG error: http://mirrors.ibiblio.org squeeze-cran/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 06F90DE5381BA480


How to fix?


zerozero wrote:[list structure added]
  1. debian-multimedia is now deb-multimedia http://deb-multimedia.org/ the change is not important if you are in the UP flow but the keyring changed
  2. http://mozilla.debian.net/ is signed


Thanks, but that doesn't tell me how to fix any of the above. (Am I failing an intelligence test?) FWIW I installed package=deb-multimedia-keyring but no fix: I still get all 3 errors above.
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

Re: repository GPG errors

Postby zerozero on Sat Sep 15, 2012 7:40 pm

deb-multimedia has this "disclaimer" regarding its keyring
The first package to install is deb-multimedia-keyring.
Since Squeeze you can install this package with apt-get but you need to presse Y when the package ask what to do and do not press return.
An new “apt-get update” is also necessary
don't know if is relevant, i don't recall ever having issues with missing keys from there.

regarding mozilla.debian the package is pkg-mozilla-archive-keyring
Code: Select all
zerozero@deb-kde ~ $ apt policy pkg-mozilla-archive-keyring deb-multimedia-keyring                                                                                     
pkg-mozilla-archive-keyring:                                                                                                                                           
  Installed: 1.0                                                                                                                                                       
  Candidate: 1.0                                                                                                                                                       
  Version table:
 *** 1.0 0
        500 http://ftp.debian.org/debian/ testing/main amd64 Packages
        100 /var/lib/dpkg/status
deb-multimedia-keyring:
  Installed: 2012.05.10-dmo3
  Candidate: 2012.05.10-dmo3
  Version table:
 *** 2012.05.10-dmo3 0
        500 http://www.deb-multimedia.org/ testing/main amd64 Packages
        100 /var/lib/dpkg/status


and about R have you seen this >> http://cran.r-project.org/bin/linux/debian/README.html
Image

[ bliss of ignorance ]
zerozero
Level 16
Level 16
 
Posts: 6480
Joined: Tue Jul 07, 2009 2:29 pm

solved mozilla repository GPG error

Postby TomRoche on Sat Sep 15, 2012 8:26 pm

zerozero wrote:regarding mozilla.debian the package is pkg-mozilla-archive-keyring


Thanks! installing that fixes the mozilla error, getting me from 3 errors to 2:

Code: Select all
$ sudo aptitude update ; sudo aptitude full-upgrade
...
W: GPG error: http://debian.linuxmint.com testing Release: The following signatures were invalid: BADSIG 07DC563D1F41B907 Christian Marillat <marillat@debian.org>
W: GPG error: http://mirrors.ibiblio.org squeeze-cran/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 06F90DE5381BA480
...
No packages will be installed, upgraded, or removed.
...
$ aptitude search "keyring" | grep -e '^i'
i   deb-multimedia-keyring       - GnuPG archive key of the deb-multimedia re
i   debian-archive-keyring       - GnuPG archive keys of the Debian archive
i A debian-keyring               - GnuPG keys of Debian Developers
i   debian-multimedia-keyring    - GnuPG archive key of the debian-multimedia
i   gnome-keyring                - GNOME keyring services (daemon and tools)
i A libgnome-keyring-common      - GNOME keyring services library - data file
i   libgnome-keyring0            - GNOME keyring services library
i   libgnome-keyring1.0-cil      - CLI library to access the GNOME Keyring da
i A libmatekeyring               - MATE keyring services library
i   libpam-gnome-keyring         - PAM module to unlock the GNOME keyring upo
i   linuxmint-keyring            - GnuPG key of the Linux Mint repository
i A mate-keyring                 - MATE keyring services
i   pkg-mozilla-archive-keyring  - GnuPG archive keys for the Debian Mozilla
i   python-gnomekeyring          - Python bindings for the GNOME keyring libr
i   python-keyring               - store and access your passwords safely


zerozero wrote:about R have you seen this >> http://cran.r-project.org/bin/linux/debian/README.html


No, but I'll try figuring that out now.
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

solved R repository GPG error

Postby TomRoche on Sat Sep 15, 2012 8:39 pm

zerozero wrote:about R have you seen this >> http://cran.r-project.org/bin/linux/debian/README.html


Thanks: the SECURE APT section made me do

Code: Select all
$ D=/tmp/CRANkeys ; mkdir -p $D ; pushd $D
$ gpg --keyserver subkeys.pgp.net --recv-key 381BA480
gpg: requesting key 381BA480 from hkp server subkeys.pgp.net
WARNING: gnome-keyring:: couldn't connect to: /tmp/keyring-F7SY8f/pkcs11: No such file or directory
gpg: key 381BA480: public key "Johannes Ranke (CRAN Debian archive) <jranke@uni-bremen.de>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
$ gpg -a --export 381BA480 > jranke_cran.asc
$ sudo apt-key add jranke_cran.asc
OK


so now I'm down to one error:

Code: Select all
$ sudo aptitude update ; sudo aptitude -s full-upgrade
...
W: GPG error: http://debian.linuxmint.com testing Release: The following signatures were invalid: BADSIG 07DC563D1F41B907 Christian Marillat <marillat@debian.org>
No packages will be installed, upgraded, or removed.
...
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

debian.linuxmint.com GPG error

Postby TomRoche on Sat Sep 15, 2012 8:46 pm

TomRoche wrote:so now I'm down to one error:

Code: Select all
$ sudo aptitude update ; sudo aptitude -s full-upgrade
...
W: GPG error: http://debian.linuxmint.com testing Release: The following signatures were invalid: BADSIG 07DC563D1F41B907 Christian Marillat <marillat@debian.org>
No packages will be installed, upgraded, or removed.
...


zerozero wrote:deb-multimedia has this "disclaimer" regarding its keyring
The first package to install is deb-multimedia-keyring.
Since Squeeze you can install this package with apt-get but you need to presse Y when the package ask what to do and do not press return.
An new “apt-get update” is also necessary

don't know if is relevant


I believe not:

  1. I did not get any prompt when installing package=deb-multimedia-keyring
  2. I've done several `aptitude update`s since installing the package
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

Re: repository GPG errors (2/3 solved)

Postby zerozero on Sun Sep 16, 2012 6:10 am

i read this at deb-multimedia
04/07/2012 :
Aptitude and Hash Sum mismatch issue
aptitude (for amd64 only) doesn't work anymore with my repository and return 'Hash Sum mismatch' errors.
I don't know why and I'm not the right person to file a bug report against aptitude.
You must use apt-get instead of aptitude.

as i see that you use mainly aptitude, can that be the cause? try purging the key and installing it again with apt (nothing lost :D
Image

[ bliss of ignorance ]
zerozero
Level 16
Level 16
 
Posts: 6480
Joined: Tue Jul 07, 2009 2:29 pm

Re: repository GPG errors (2/3 solved)

Postby TomRoche on Sun Sep 16, 2012 4:08 pm

zerozero wrote:try purging the key and installing it again with apt


I tried. What am I doing wrong?

Code: Select all
$ sudo apt-key list
> /etc/apt/trusted.gpg
> --------------------
> pub   1024D/F42584E6 2008-04-06 [expired: 2012-05-15]
> uid                  Lenny Stable Release Key <debian-release@lists.debian.org>

> pub   4096R/55BE302B 2009-01-27 [expires: 2012-12-31]
> uid                  Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>

> pub   2048R/6D849617 2009-01-24 [expires: 2013-01-23]
> uid                  Debian-Volatile Archive Automatic Signing Key (5.0/lenny)

> pub   4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
> uid                  Squeeze Stable Release Key <debian-release@lists.debian.org>

> pub   4096R/473041FA 2010-08-27 [expires: 2018-03-05]
> uid                  Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>

> pub   1024D/0FF405B2 2009-04-29
> uid                  Clement Lefebvre (Linux Mint Package Repository v1) <root@linuxmint.com>
> sub   2048g/0F346519 2009-04-29

* pub   1024D/1F41B907 1999-10-03
* uid                  Christian Marillat <marillat@debian.org>
* uid                  Christian Marillat <marillat@free.fr>
> sub   1536g/C28DCC42 1999-10-03
> sub   1024D/5D3877A7 2002-08-26

> pub   1024D/2A41B42C 2011-01-12
> uid                  jd's apt repository <acid@debian.org>
> sub   4096g/62AD64F4 2011-01-12

> pub   1024D/381BA480 2007-02-15
> uid                  Johannes Ranke (CRAN Debian archive) <jranke@uni-bremen.de>

> /etc/apt/trusted.gpg.d//pkg-mozilla-archive-keyring.gpg
> -------------------------------------------------------
> pub   4096R/06C4AE2A 2010-11-20 [expires: 2012-11-14]
> uid                  Debian Mozilla team APT archive <pkg-mozilla-maintainers@lists.alioth.debian.org>

$ sudo apt-key del 1F41B907
> OK

$ sudo aptitude update ; sudo aptitude -s full-upgrade
...
> W: GPG error: http://debian.linuxmint.com testing Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907
> No packages will be installed, upgraded, or removed.


I seem to have successfully purged the key--at least, I changed the error !-) But when I try to find the key and reinstall it:

Code: Select all
$ KEY_ID='07DC563D1F41B907'
$ KEY_SERVER='keyring.debian.org'
$ gpg --keyserver ${KEY_SERVER} --recv-keys ${KEY_ID}
> gpg: requesting key 1F41B907 from hkp server keyring.debian.org
> WARNING: gnome-keyring:: couldn't connect to: /tmp/keyring-F7SY8f/pkcs11: No such file or directory
> gpg: key 1F41B907: public key "Christian Marillat <marillat@debian.org>" imported
> gpg: no ultimately trusted keys found
> gpg: Total number processed: 1
> gpg:               imported: 1

$ sudo gpg --armor --export ${KEY_ID} | sudo apt-key add -
> gpg: directory `/root/.gnupg' created
> gpg: new configuration file `/root/.gnupg/gpg.conf' created
> gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
> gpg: keyring `/root/.gnupg/secring.gpg' created
> gpg: keyring `/root/.gnupg/pubring.gpg' created
> gpg: WARNING: nothing exported
> gpg: no valid OpenPGP data found.

$ sudo aptitude update ; sudo aptitude -s full-upgrade
...
> W: GPG error: http://debian.linuxmint.com testing Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907
> No packages will be installed, upgraded, or removed.


... no change in the error. What am I doing wrong?
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

Re: repository GPG errors (2/3 solved)

Postby zerozero on Sun Sep 16, 2012 7:26 pm

Tom,
i don't know anymore to be honest :lol: KISS
i start with deb-multimedia-keyring and no errors
Code: Select all
zerozero@deb-kde ~ $ aptitude search "keyring" | grep -e '^i'
i   deb-multimedia-keyring          - GnuPG archive key of the deb-multimedia re
i   debian-archive-keyring          - GnuPG archive keys of the Debian archive 
i   gnome-keyring                   - GNOME keyring services (daemon and tools)
i   libgnome-keyring-common         - GNOME keyring services library - data file
i   libgnome-keyring0               - GNOME keyring services library           
i   libpam-gnome-keyring            - PAM module to unlock the GNOME keyring upo
i   linuxmint-keyring               - GnuPG key of the Linux Mint repository   
i   pkg-mozilla-archive-keyring     - GnuPG archive keys for the Debian Mozilla

Code: Select all
zerozero@deb-kde ~ $ sudo aptitude update
Hit http://www.deb-multimedia.org testing InRelease
Hit http://ftp.debian.org testing InRelease                                             
Hit http://www.deb-multimedia.org testing/main Sources/DiffIndex                       
Hit http://ftp.debian.org testing/main Sources/DiffIndex                               
Ign http://packages.linuxmint.com debian InRelease                                     
Hit http://security.debian.org testing/updates InRelease
Hit http://www.deb-multimedia.org testing/non-free Sources/DiffIndex
Hit http://www.deb-multimedia.org testing/main amd64 Packages/DiffIndex
Hit http://www.deb-multimedia.org testing/non-free amd64 Packages/DiffIndex
Ign http://mozilla.debian.net experimental InRelease
Hit http://ftp.debian.org testing/contrib Sources/DiffIndex                             
Hit http://mozilla.debian.net experimental Release.gpg                                 
Hit http://security.debian.org testing/updates/main Sources                             
Hit http://ftp.debian.org testing/non-free Sources/DiffIndex                           
Hit http://mozilla.debian.net experimental Release                                     
Hit http://security.debian.org testing/updates/contrib Sources                         
Hit http://ftp.debian.org testing/main amd64 Packages/DiffIndex                         
Get: 1 http://packages.linuxmint.com debian Release.gpg [197 B]                         
Hit http://ftp.debian.org testing/contrib amd64 Packages/DiffIndex
Hit http://ftp.debian.org testing/non-free amd64 Packages/DiffIndex
Hit http://ftp.debian.org testing/contrib Translation-en/DiffIndex
Hit http://ftp.debian.org testing/main Translation-en/DiffIndex
Hit http://ftp.debian.org testing/non-free Translation-en/DiffIndex
Hit http://security.debian.org testing/updates/non-free Sources
Hit http://security.debian.org testing/updates/main amd64 Packages
Hit http://security.debian.org testing/updates/contrib amd64 Packages
Hit http://security.debian.org testing/updates/non-free amd64 Packages
Hit http://mozilla.debian.net experimental/iceweasel-aurora amd64 Packages
Get: 2 http://packages.linuxmint.com debian Release [15.6 kB]
Ign http://www.deb-multimedia.org testing/main Translation-en_GB                       
Ign http://www.deb-multimedia.org testing/main Translation-en                 
Ign http://www.deb-multimedia.org testing/non-free Translation-en_GB           
Ign http://www.deb-multimedia.org testing/non-free Translation-en             
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en_GB 
Get: 3 http://packages.linuxmint.com debian/main Sources [15.5 kB]
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en   
Ign http://security.debian.org testing/updates/contrib Translation-en_GB
Get: 4 http://packages.linuxmint.com debian/upstream Sources [2,201 B]
Ign http://security.debian.org testing/updates/contrib Translation-en
Ign http://security.debian.org testing/updates/main Translation-en_GB
Ign http://security.debian.org testing/updates/main Translation-en
Ign http://security.debian.org testing/updates/non-free Translation-en_GB
Get: 5 http://packages.linuxmint.com debian/import Sources [27.4 kB]
Ign http://security.debian.org testing/updates/non-free Translation-en
Get: 6 http://packages.linuxmint.com debian/backport Sources [20 B]
Get: 7 http://packages.linuxmint.com debian/romeo Sources [1,255 B]
Get: 8 http://packages.linuxmint.com debian/incoming Sources [6,379 B]
Get: 9 http://packages.linuxmint.com debian/main amd64 Packages [16.0 kB]
Get: 10 http://packages.linuxmint.com debian/upstream amd64 Packages [8,956 B]
Get: 11 http://packages.linuxmint.com debian/import amd64 Packages [54.9 kB]
Get: 12 http://packages.linuxmint.com debian/backport amd64 Packages [20 B]
Get: 13 http://packages.linuxmint.com debian/romeo amd64 Packages [20 B]
Get: 14 http://packages.linuxmint.com debian/incoming amd64 Packages [51.2 kB]
Ign http://packages.linuxmint.com debian/backport Translation-en_GB                     
Ign http://packages.linuxmint.com debian/backport Translation-en                       
Ign http://packages.linuxmint.com debian/import Translation-en_GB                       
Ign http://packages.linuxmint.com debian/import Translation-en
Ign http://packages.linuxmint.com debian/incoming Translation-en_GB
Ign http://packages.linuxmint.com debian/incoming Translation-en
Ign http://packages.linuxmint.com debian/main Translation-en_GB
Ign http://packages.linuxmint.com debian/main Translation-en
Ign http://packages.linuxmint.com debian/romeo Translation-en_GB
Ign http://packages.linuxmint.com debian/romeo Translation-en
Ign http://packages.linuxmint.com debian/upstream Translation-en_GB
Ign http://packages.linuxmint.com debian/upstream Translation-en
Fetched 200 kB in 14s (14.2 kB/s)

i purged the key
Code: Select all
zerozero@deb-kde ~ $ sudo aptitude purge deb-multimedia-keyring
The following packages will be REMOVED: 
  deb-multimedia-keyring{p}
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 45.1 kB will be freed.
Do you want to continue? [Y/n/?] Y
(Reading database ... 210962 files and directories currently installed.)
Removing deb-multimedia-keyring ...
OK

cleaned the cache and checked again
Code: Select all
zerozero@deb-kde ~ $ sudo aptitude clean
zerozero@deb-kde ~ $ aptitude search "keyring" | grep -e '^i'
i   debian-archive-keyring          - GnuPG archive keys of the Debian archive 
i   gnome-keyring                   - GNOME keyring services (daemon and tools)
i   libgnome-keyring-common         - GNOME keyring services library - data file
i   libgnome-keyring0               - GNOME keyring services library           
i   libpam-gnome-keyring            - PAM module to unlock the GNOME keyring upo
i   linuxmint-keyring               - GnuPG key of the Linux Mint repository   
i   pkg-mozilla-archive-keyring     - GnuPG archive keys for the Debian Mozilla


the next update had the NO_PUBKEY error of course
Code: Select all
zerozero@deb-kde ~ $ sudo aptitude update
Hit http://www.deb-multimedia.org testing InRelease
Err http://www.deb-multimedia.org testing InRelease                                     
Hit http://security.debian.org testing/updates InRelease                               
Hit http://security.debian.org testing/updates/main Sources                             
Hit http://security.debian.org testing/updates/contrib Sources                         
Hit http://security.debian.org testing/updates/non-free Sources                         
Ign http://mozilla.debian.net experimental InRelease                                   
Ign http://packages.linuxmint.com debian InRelease                                     
Hit http://security.debian.org testing/updates/main amd64 Packages                     
Hit http://mozilla.debian.net experimental Release.gpg                                 
Hit http://security.debian.org testing/updates/contrib amd64 Packages                   
Hit http://mozilla.debian.net experimental Release                                     
Hit http://security.debian.org testing/updates/non-free amd64 Packages                 
Hit http://mozilla.debian.net experimental/iceweasel-aurora amd64 Packages             
Get: 1 http://packages.linuxmint.com debian Release.gpg [197 B]                         
Get: 2 http://packages.linuxmint.com debian Release [15.6 kB]                           
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en_GB           
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en             
Get: 3 http://packages.linuxmint.com debian/main Sources [15.5 kB]                     
Hit http://ftp.debian.org testing InRelease                                             
Hit http://ftp.debian.org testing/main Sources/DiffIndex             
Get: 4 http://packages.linuxmint.com debian/upstream Sources [2,201 B]
Get: 5 http://packages.linuxmint.com debian/import Sources [27.4 kB]
Hit http://ftp.debian.org testing/contrib Sources/DiffIndex           
Hit http://ftp.debian.org testing/non-free Sources/DiffIndex
Hit http://ftp.debian.org testing/main amd64 Packages/DiffIndex
Get: 6 http://packages.linuxmint.com debian/backport Sources [20 B]
Get: 7 http://packages.linuxmint.com debian/romeo Sources [1,255 B]
Get: 8 http://packages.linuxmint.com debian/incoming Sources [6,379 B]
Hit http://ftp.debian.org testing/contrib amd64 Packages/DiffIndex
Hit http://ftp.debian.org testing/non-free amd64 Packages/DiffIndex
Hit http://ftp.debian.org testing/contrib Translation-en/DiffIndex
Hit http://ftp.debian.org testing/main Translation-en/DiffIndex
Hit http://ftp.debian.org testing/non-free Translation-en/DiffIndex
Ign http://security.debian.org testing/updates/contrib Translation-en_GB
Ign http://security.debian.org testing/updates/contrib Translation-en
Ign http://security.debian.org testing/updates/main Translation-en_GB
Get: 9 http://packages.linuxmint.com debian/main amd64 Packages [16.0 kB]
Get: 10 http://packages.linuxmint.com debian/upstream amd64 Packages [8,956 B]
Ign http://security.debian.org testing/updates/main Translation-en
Ign http://security.debian.org testing/updates/non-free Translation-en_GB
Ign http://security.debian.org testing/updates/non-free Translation-en
Get: 11 http://packages.linuxmint.com debian/import amd64 Packages [54.9 kB]
Get: 12 http://packages.linuxmint.com debian/backport amd64 Packages [20 B]
Get: 13 http://packages.linuxmint.com debian/romeo amd64 Packages [20 B]
Get: 14 http://packages.linuxmint.com debian/incoming amd64 Packages [51.2 kB]
Ign http://packages.linuxmint.com debian/backport Translation-en_GB                     
Ign http://packages.linuxmint.com debian/backport Translation-en
Ign http://packages.linuxmint.com debian/import Translation-en_GB
Ign http://packages.linuxmint.com debian/import Translation-en
Ign http://packages.linuxmint.com debian/incoming Translation-en_GB
Ign http://packages.linuxmint.com debian/incoming Translation-en
Ign http://packages.linuxmint.com debian/main Translation-en_GB
Ign http://packages.linuxmint.com debian/main Translation-en
Ign http://packages.linuxmint.com debian/romeo Translation-en_GB
Ign http://packages.linuxmint.com debian/romeo Translation-en
Ign http://packages.linuxmint.com debian/upstream Translation-en_GB
Ign http://packages.linuxmint.com debian/upstream Translation-en
Fetched 200 kB in 14s (13.4 kB/s)
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://www.deb-multimedia.org testing InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907

W: Failed to fetch http://www.deb-multimedia.org/dists/testing/InRelease:
W: Some index files failed to download. They have been ignored, or old ones used instead.


installing the key
Code: Select all
zerozero@deb-kde ~ $ sudo aptitude install deb-multimedia-keyring
The following NEW packages will be installed:
  deb-multimedia-keyring
0 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 15.3 kB of archives. After unpacking 45.1 kB will be used.
Get: 1 http://www.deb-multimedia.org/ testing/main deb-multimedia-keyring all 2012.05.10-dmo3 [15.3 kB]
Fetched 15.3 kB in 0s (106 kB/s)               
Selecting previously unselected package deb-multimedia-keyring.
(Reading database ... 210956 files and directories currently installed.)
Unpacking deb-multimedia-keyring (from .../deb-multimedia-keyring_2012.05.10-dmo3_all.deb) ...
Setting up deb-multimedia-keyring (2012.05.10-dmo3) ...
OK

clean update
Code: Select all
zerozero@deb-kde ~ $ sudo aptitude update
Hit http://www.deb-multimedia.org testing InRelease
Hit http://security.debian.org testing/updates InRelease                               
Hit http://ftp.debian.org testing InRelease                                             
Hit http://www.deb-multimedia.org testing/main Sources/DiffIndex                       
Hit http://security.debian.org testing/updates/main Sources                             
Hit http://www.deb-multimedia.org testing/non-free Sources/DiffIndex
Hit http://ftp.debian.org testing/main Sources/DiffIndex                               
Hit http://security.debian.org testing/updates/contrib Sources                         
Hit http://security.debian.org testing/updates/non-free Sources
Hit http://security.debian.org testing/updates/main amd64 Packages
Hit http://security.debian.org testing/updates/contrib amd64 Packages
Hit http://security.debian.org testing/updates/non-free amd64 Packages
Hit http://www.deb-multimedia.org testing/main amd64 Packages/DiffIndex
Hit http://www.deb-multimedia.org testing/non-free amd64 Packages/DiffIndex
Ign http://mozilla.debian.net experimental InRelease
Hit http://ftp.debian.org testing/contrib Sources/DiffIndex
Hit http://mozilla.debian.net experimental Release.gpg                                 
Hit http://ftp.debian.org testing/non-free Sources/DiffIndex                           
Hit http://mozilla.debian.net experimental Release                                     
Hit http://ftp.debian.org testing/main amd64 Packages/DiffIndex                         
Hit http://ftp.debian.org testing/contrib amd64 Packages/DiffIndex                     
Hit http://ftp.debian.org testing/non-free amd64 Packages/DiffIndex
Hit http://ftp.debian.org testing/contrib Translation-en/DiffIndex
Hit http://ftp.debian.org testing/main Translation-en/DiffIndex
Hit http://ftp.debian.org testing/non-free Translation-en/DiffIndex
Hit http://mozilla.debian.net experimental/iceweasel-aurora amd64 Packages
Ign http://packages.linuxmint.com debian InRelease
Get: 1 http://packages.linuxmint.com debian Release.gpg [197 B]
Ign http://www.deb-multimedia.org testing/main Translation-en_GB                       
Get: 2 http://packages.linuxmint.com debian Release [15.6 kB]       
Ign http://www.deb-multimedia.org testing/main Translation-en                           
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en_GB 
Ign http://www.deb-multimedia.org testing/non-free Translation-en_GB           
Ign http://mozilla.debian.net experimental/iceweasel-aurora Translation-en             
Ign http://www.deb-multimedia.org testing/non-free Translation-en             
Get: 3 http://packages.linuxmint.com debian/main Sources [15.5 kB]
Ign http://security.debian.org testing/updates/contrib Translation-en_GB
Ign http://security.debian.org testing/updates/contrib Translation-en
Ign http://security.debian.org testing/updates/main Translation-en_GB
Ign http://security.debian.org testing/updates/main Translation-en
Ign http://security.debian.org testing/updates/non-free Translation-en_GB
Ign http://security.debian.org testing/updates/non-free Translation-en
Get: 4 http://packages.linuxmint.com debian/upstream Sources [2,201 B]
Get: 5 http://packages.linuxmint.com debian/import Sources [27.4 kB]
Get: 6 http://packages.linuxmint.com debian/backport Sources [20 B]
Get: 7 http://packages.linuxmint.com debian/romeo Sources [1,255 B]
Get: 8 http://packages.linuxmint.com debian/incoming Sources [6,379 B]
Get: 9 http://packages.linuxmint.com debian/main amd64 Packages [16.0 kB]
Get: 10 http://packages.linuxmint.com debian/upstream amd64 Packages [8,956 B]
Get: 11 http://packages.linuxmint.com debian/import amd64 Packages [54.9 kB]
Get: 12 http://packages.linuxmint.com debian/backport amd64 Packages [20 B]
Get: 13 http://packages.linuxmint.com debian/romeo amd64 Packages [20 B]
Get: 14 http://packages.linuxmint.com debian/incoming amd64 Packages [51.2 kB]
Ign http://packages.linuxmint.com debian/backport Translation-en_GB                     
Ign http://packages.linuxmint.com debian/backport Translation-en                       
Ign http://packages.linuxmint.com debian/import Translation-en_GB
Ign http://packages.linuxmint.com debian/import Translation-en
Ign http://packages.linuxmint.com debian/incoming Translation-en_GB
Ign http://packages.linuxmint.com debian/incoming Translation-en
Ign http://packages.linuxmint.com debian/main Translation-en_GB
Ign http://packages.linuxmint.com debian/main Translation-en
Ign http://packages.linuxmint.com debian/romeo Translation-en_GB
Ign http://packages.linuxmint.com debian/romeo Translation-en
Ign http://packages.linuxmint.com debian/upstream Translation-en_GB
Ign http://packages.linuxmint.com debian/upstream Translation-en
Fetched 200 kB in 14s (14.1 kB/s)

check again (i'm where i started)
Code: Select all
zerozero@deb-kde ~ $ aptitude search "keyring" | grep -e '^i'
i   deb-multimedia-keyring          - GnuPG archive key of the deb-multimedia re
i   debian-archive-keyring          - GnuPG archive keys of the Debian archive 
i   gnome-keyring                   - GNOME keyring services (daemon and tools)
i   libgnome-keyring-common         - GNOME keyring services library - data file
i   libgnome-keyring0               - GNOME keyring services library           
i   libpam-gnome-keyring            - PAM module to unlock the GNOME keyring upo
i   linuxmint-keyring               - GnuPG key of the Linux Mint repository   
i   pkg-mozilla-archive-keyring     - GnuPG archive keys for the Debian Mozilla
zerozero@deb-kde ~ $
Image

[ bliss of ignorance ]
zerozero
Level 16
Level 16
 
Posts: 6480
Joined: Tue Jul 07, 2009 2:29 pm

Re: repository GPG errors (2/3 solved)

Postby TomRoche on Sun Sep 16, 2012 8:44 pm

zerozero wrote:
Code: Select all
$ aptitude search "keyring" | grep -e '^i'
$ sudo aptitude purge deb-multimedia-keyring


My problem appears to be that, without the key, neither aptitude nor apt-get can purge the package :-(

Code: Select all
$ aptitude search "keyring" | grep -e '^i'
i   deb-multimedia-keyring  - GnuPG archive key of the deb-multimedia
...

$ sudo aptitude purge deb-multimedia-keyring
The following packages will be REMOVED: 
  deb-multimedia-keyring{p}
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 45.1 kB will be freed.
Do you want to continue? [Y/n/?]
(Reading database ... 300355 files and directories currently installed.)
Removing deb-multimedia-keyring ...
gpg: key "1F41B907" not found: eof
gpg: 1F41B907: delete key failed: eof
dpkg: error processing deb-multimedia-keyring (--purge):
 subprocess installed pre-removal script returned error exit status 2
configured to not write apport reports
                                      Errors were encountered while processing:
 deb-multimedia-keyring
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:

# force (not hard enough!), verbose (not very!)
$ sudo aptitude -f -v purge deb-multimedia-keyring
The following packages will be REMOVED: 
  deb-multimedia-keyring{ap}
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 45.1 kB will be freed.
Do you want to continue? [Y/n/?]
(Reading database ... 300355 files and directories currently installed.)
Removing deb-multimedia-keyring ...
gpg: key "1F41B907" not found: eof
gpg: 1F41B907: delete key failed: eof
dpkg: error processing deb-multimedia-keyring (--purge):
 subprocess installed pre-removal script returned error exit status 2
configured to not write apport reports
                                      Errors were encountered while processing:
 deb-multimedia-keyring
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:

Current status: 0 broken [+0], 0 updates [+0], 35610 new [+0].

# try apt-get
tlroche@tlrPanP5:~$ sudo apt-get purge deb-multimedia-keyring
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  deb-multimedia-keyring*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 45.1 kB disk space will be freed.
Do you want to continue [Y/n]?
(Reading database ... 300355 files and directories currently installed.)
Removing deb-multimedia-keyring ...
gpg: key "1F41B907" not found: eof
gpg: 1F41B907: delete key failed: eof
dpkg: error processing deb-multimedia-keyring (--purge):
 subprocess installed pre-removal script returned error exit status 2
configured to not write apport reports
                                      Errors were encountered while processing:
 deb-multimedia-keyring
E: Sub-process /usr/bin/dpkg returned an error code (1)


Is there a workaround? Something lower-level than aptitude or apt-get (but hopefully not *too* dangerous :-)
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

repository GPG errors (3/3 solved)

Postby TomRoche on Fri Jan 11, 2013 8:40 pm

Apologies (esp to offline requester--hope this helps!) for leaving the thread uncompleted:

TomRoche wrote:without the key, neither aptitude nor apt-get can purge the package


The solution was, get the key :-) only without using APT. What worked was `gpg`:

Code: Select all
PUBKEY='1F41B907'           # your missing key here
KEYSERVER='pgpkeys.mit.edu' # your host of choice here
gpg --keyserver ${KEYSERVER} --recv-key ${PUBKEY}
gpg -a --export ${PUBKEY} | sudo apt-key add -


After that I was able to [purge, reinstall] package=deb-multimedia-keyring

This also worked for a recent problem with debian.linuxmint.com:NO_PUBKEY, after reinstalling package=linuxmint-keyring failed. I just substituted (in the scriptlet above) the key @ end of the error message:

Code: Select all
W: GPG error: http://debian.linuxmint.com testing InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907
TomRoche
Level 3
Level 3
 
Posts: 173
Joined: Thu Jan 13, 2011 2:52 pm

Re: SOLVED: repository GPG errors

Postby zerozero on Fri Jan 11, 2013 9:40 pm

i'm glad you solved it :)
Image

[ bliss of ignorance ]
zerozero
Level 16
Level 16
 
Posts: 6480
Joined: Tue Jul 07, 2009 2:29 pm

Re: repository GPG errors (3/3 solved)

Postby Redsandro on Mon Apr 01, 2013 4:29 pm

THANK YOU! I searched heaven and earth for this:

TomRoche wrote:
Code: Select all
PUBKEY='1F41B907'           # your missing key here
KEYSERVER='pgpkeys.mit.edu' # your host of choice here
gpg --keyserver ${KEYSERVER} --recv-key ${PUBKEY}
gpg -a --export ${PUBKEY} | sudo apt-key add -


Though it gave me:
W: GPG error: http://packages.linuxmint.com debian Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 3EE67F3D0FF405B2
so I did
Code: Select all
gpg --keyserver pgpkeys.mit.edu --recv-key 3EE67F3D0FF405B2
gpg -a --export 3EE67F3D0FF405B2 | sudo apt-key add -

And now I can finally get some normal packages in my Debian-testing thanks to the Mint repository.
Redsandro
Level 3
Level 3
 
Posts: 105
Joined: Sun Jul 17, 2011 6:40 pm

Linux Mint is funded by ads and donations.
 

Return to Update Packs Repositories

Who is online

Users browsing this forum: No registered users and 3 guests